$ rpki-client -vvf rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft File: r6xXdRxedph17Sb1vN8X9T3_nJk.mft (raw, json) Hash identifier: Lo2hkx3g/srSDq65lKwebh4hIQwNCRsFwDvF9rQCaQA= Subject key identifier: 8E:9B:B9:28:D2:F3:80:DD:62:A5:EA:9F:96:56:C3:BF:AE:AA:9E:F8 Authority key identifier: AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99 Certificate issuer: /CN=A914F0E7/serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99 Certificate serial: 0702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft Manifest number: 06FD Signing time: Thu 24 Apr 2025 21:44:10 +0000 Manifest this update: Thu 24 Apr 2025 21:44:10 +0000 Manifest next update: Thu 01 May 2025 21:44:10 +0000 Files and hashes: 1: r6xXdRxedph17Sb1vN8X9T3_nJk.crl (hash: gWDMiGeg7CenKdtWLb7Y7UfhmPNziA7q53VVP/PeT6k=) 2: 595EF8C63DC711EBA35AB51DC4F9AE02.roa (hash: kDcfkRRwNdoJ431TUAg/mhxPRjcYBJFeGLnnYla+ins=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F0E7, serialNumber=AFAC57751C5E769875ED26F5BCDF17F53DFF9C99 Validity Not Before: Apr 24 21:44:10 2025 GMT Not After : May 1 21:44:10 2025 GMT Subject: CN=680ab0aa-3966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:7a:4c:d3:7b:5c:d7:34:e7:e8:c5:1e:ae: a0:8a:ad:71:84:aa:f2:18:cb:36:64:28:91:28:72: af:ef:76:27:50:bd:c6:02:17:72:00:4e:e4:b5:f6: 22:bd:49:a7:6f:e2:d2:2f:98:03:b8:de:e0:94:43: 6e:95:4f:21:b2:48:51:db:35:5f:6e:3c:23:05:e1: c2:68:a5:39:52:3b:22:78:77:98:a2:b4:47:5f:cf: 8d:1e:f2:c0:9a:b1:51:a8:ea:cf:9e:50:c3:f6:5c: fa:cd:30:2f:4a:41:47:e7:e3:01:93:37:ae:91:79: 14:b1:c6:ea:d5:32:72:d5:9f:4a:5c:67:3f:a5:2a: 4d:44:7d:40:a3:c9:4c:37:b6:ab:78:e9:20:dd:00: 4f:29:47:bb:7f:d9:34:36:c8:fc:8c:50:cb:8f:42: c1:bd:84:ce:b9:b1:22:a4:0e:df:73:61:27:fe:02: 93:13:8f:45:58:42:23:6b:61:fa:6a:53:3e:68:fb: e9:87:e7:f2:93:80:56:97:8f:16:7e:27:27:a4:7c: 01:77:68:76:3a:87:d2:ff:ab:f8:7b:ab:35:1d:6f: e9:c0:a4:cf:6c:23:4a:36:d0:a9:e3:f5:10:0e:4c: 98:2c:37:1d:ef:9a:76:55:09:fd:e2:2a:1d:e9:25: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:B9:28:D2:F3:80:DD:62:A5:EA:9F:96:56:C3:BF:AE:AA:9E:F8 X509v3 Authority Key Identifier: keyid:AF:AC:57:75:1C:5E:76:98:75:ED:26:F5:BC:DF:17:F5:3D:FF:9C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6xXdRxedph17Sb1vN8X9T3_nJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F0E7/03A12C5C3DC611EB82A7681CC4F9AE02/r6xXdRxedph17Sb1vN8X9T3_nJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:eb:b3:43:1c:d7:e6:06:9e:43:89:2e:98:91:80:0d:cb:2f: 63:a8:db:f6:6a:9d:14:97:41:6f:8c:e1:85:6e:9e:7a:f4:cd: 31:60:88:61:4d:dd:0f:59:01:81:08:ee:fb:63:b2:c8:93:5a: 5f:e3:36:cb:9d:44:c2:0c:d7:73:80:f8:0c:74:89:2f:9a:40: a4:87:8b:f0:1d:79:51:31:29:fd:92:86:58:22:a3:eb:03:6e: 9f:65:f9:e0:9f:11:af:5c:39:3c:e9:84:fb:16:f2:0f:0b:08: 80:14:e2:e2:d4:db:f8:7d:6b:92:d8:ca:d6:ce:1a:97:12:93: ed:94:cd:f4:23:de:44:8a:4a:a0:2f:3f:a6:6b:b7:f5:2f:1d: 36:fa:60:12:e6:bf:30:47:6d:f0:55:5b:5e:d8:85:e8:ac:2b: 11:44:f9:04:5d:b4:09:97:bd:19:d4:4c:df:1f:1a:2c:f1:52: b1:27:76:f3:0e:d9:6a:52:f1:ed:3e:a1:2d:77:e8:45:b1:87: 40:f4:24:74:c4:88:59:7b:34:0e:67:dd:09:4b:56:26:e7:53: 88:fc:f3:c5:1d:a0:cd:90:d7:04:df:44:16:f4:64:6c:92:63: dc:cf:11:e1:a4:fd:0a:09:5f:dc:b3:e9:3b:0c:95:aa:e7:b2: 24:f9:25:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYwRTcxMTAvBgNVBAUTKEFGQUM1Nzc1MUM1RTc2OTg3NUVEMjZGNUJDREYxN0Y1 M0RGRjlDOTkwHhcNMjUwNDI0MjE0NDEwWhcNMjUwNTAxMjE0NDEwWjAYMRYwFAYD VQQDEw02ODBhYjBhYS0zOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM96TNN7XNc05+jFHq6giq1xhKryGMs2ZCiRKHKv73YnUL3GAhdyAE7ktfYi vUmnb+LSL5gDuN7glENulU8hskhR2zVfbjwjBeHCaKU5UjsieHeYorRHX8+NHvLA mrFRqOrPnlDD9lz6zTAvSkFH5+MBkzeukXkUscbq1TJy1Z9KXGc/pSpNRH1Ao8lM N7areOkg3QBPKUe7f9k0Nsj8jFDLj0LBvYTOubEipA7fc2En/gKTE49FWEIja2H6 alM+aPvph+fyk4BWl48WficnpHwBd2h2OofS/6v4e6s1HW/pwKTPbCNKNtCp4/UQ DkyYLDcd75p2VQn94iod6SXL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6buSjS 84DdYqXqn5ZWw7+uqp74MB8GA1UdIwQYMBaAFK+sV3UcXnaYde0m9bzfF/U9/5yZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjBFNy8wM0ExMkM1QzNE QzYxMUVCODJBNzY4MUNDNEY5QUUwMi9yNnhYZFJ4ZWRwaDE3U2Ixdk44WDlUM19u SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2eFhkUnhlZHBoMTdTYjF2TjhYOVQzX25Kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjBFNy8wM0ExMkM1QzNEQzYxMUVCODJBNzY4MUNDNEY5QUUwMi9yNnhYZFJ4ZWRw aDE3U2Ixdk44WDlUM19uSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ67NDHNfmBp5DiS6YkYANyy9jqNv2ap0Ul0FvjOGFbp569M0xYIhh Td0PWQGBCO77Y7LIk1pf4zbLnUTCDNdzgPgMdIkvmkCkh4vwHXlRMSn9koZYIqPr A26fZfngnxGvXDk86YT7FvIPCwiAFOLi1Nv4fWuS2MrWzhqXEpPtlM30I95Eikqg Lz+ma7f1Lx02+mAS5r8wR23wVVte2IXorCsRRPkEXbQJl70Z1EzfHxos8VKxJ3bz DtlqUvHtPqEtd+hFsYdA9CR0xIhZezQOZ90JS1Ym51OI/PPFHaDNkNcE30QW9GRs kmPczxHhpP0KCV/cs+k7DJWq57Ik+SX1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:08 2025 by rpki-client